Codec-C

Discussion in 'Malware Help (A Specialist Will Reply)' started by eterna, Apr 4, 2012.

  1. eterna

    eterna Private E-2

    I was one of dozens stupid enough to have clicked through the link while watching streaming videos. I need to get rid of it as soon as possible. The current problems i face are:
    -Stuff from my start menu is missing
    -Cant seem to uninstall 'Codec-c' neither normally nor through safe mode.
    -The annoying ads
    -IE toolbar, wont go away either.

    I also spotted something called 'Conduit Engine', should i uninstall that too?
    Any help would be greatly appreciated.

    Attached along is the MGtools log.
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please attach the other requested logs:
    SAS
    MBAM
    ComboFix
    RootRepeal -- if it runs.
     
  3. eterna

    eterna Private E-2

    Appreciate the response. I hope these help.
     

    Attached Files:

  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Can I assume that you had MBAM fix what it found?

    Please clean out this folder:
    C:\Users\samsung1\AppData\Local\temp\

    Now use add/remove programs to uninstall:
    Messenger Plus Toolbar
    Messenger Plus! 5

    Next, please put ComboFix directly on your desktop, not here:
    Running from: c:\users\samsung1\Downloads\ComboFix.exe

    Now copy just the bold text below to notepad (Do not include any space above the word REGEDIT). Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.


    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

    Then attach the below log:

    • C:\MGlogs.zip

    Make sure you tell me how things are working now!
     
  5. eterna

    eterna Private E-2

    Thanks for the prompt reply.

    Yes, MBAM did delete a couple files related to 'Codec-c'. It also showed me a couple of registry files it found after the scan, didnt have the courage to delete those. I wasnt really sure if I should have done that, i've had bad experiences with trying to clean/fix the registry.

    Did everything like you said, I DID get the success message for the registry fix.

    I hope its cleaned, seems like it is. All that remains is the stuff thats missing from my start menu.

    Thanks again, really appreciate it.
     

    Attached Files:

  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  7. eterna

    eterna Private E-2

    Those registry items never showed up after the first time I chose to ignore them, i've run MBAM a couple of times.
    Everything else seems fine from the looks of it.
    Thanks for all your help, appreciate it.:)
     
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are most welcome.

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.We recommend them for doing backup scans when you suspect a malware infection.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.


    3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.

    10. After doing the above, you should work thru the below link:


    Malware removal from a National Chain = $149
    Malware removal from MajorGeeks = $0
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds